An idiomatic, lean, fast & safe pure Rust implementation of Git
This report presents the forensic synthetic code analysis of GitoxideLabs/gitoxide, a Rust project with 11,699 GitHub stars. SynthScan v2.0 examined 386,872 lines of code across 1890 source files, recording 922 pattern matches distributed across 8 syntactic categories. The overall adjusted score of 2.5 places this repository in the Likely human-written band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 922 distinct pattern matches across 8 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Cargo.toml | 41 | ## Can be amended with the `http-client-curl-rustls` feature to avoid `openssl` as backend. | COMMENT |
| LOW | Cargo.toml | 61 | COMMENT | |
| LOW | Cargo.toml | 81 | ## Due to async client-networking not being implemented for most transports, this one supports only the 'git+tcp' and HT | COMMENT |
| LOW | Cargo.toml | 141 | COMMENT | |
| LOW | Cargo.toml | 321 | [workspace.lints.rust] | COMMENT |
| LOW | deny.toml | 41 | # The higher the value, the more closely the license text must be to the | COMMENT |
| LOW | gix-zlib/src/lib.rs | 1 | #![deny(missing_docs)] | COMMENT |
| LOW | gix-zlib/src/lib.rs | 61 | #[derive(Copy, Clone, PartialEq, Eq, Debug)] | COMMENT |
| LOW | gix-zlib/src/stream/deflate.rs | 101 | #[derive(Copy, Clone, PartialEq, Eq, Debug)] | COMMENT |
| LOW | gix-zlib/src/stream/deflate.rs | 121 | /// aligned on a byte boundary so that the decompressor can get all input | COMMENT |
| LOW | gix-sec/src/lib.rs | 1 | //! A shared trust model for `gitoxide` crates. | COMMENT |
| LOW | gix-negotiate/src/lib.rs | 1 | //! An implementation of negotiation algorithms to help the server figure out what we have in common so it can optimize | COMMENT |
| LOW | gix-negotiate/src/lib.rs | 21 | /// | COMMENT |
| LOW | gix-negotiate/src/lib.rs | 121 | } | COMMENT |
| LOW | gix-transport/Cargo.toml | 41 | ## NOTE: `https://` is NOT supported by default. You must enable one of the `http-client-reqwest-rust-tls` | COMMENT |
| LOW | gix-transport/tests/client/blocking_io/http/mod.rs | 241 | "the authentication information is used in subsequent calls" | COMMENT |
| LOW | gix-transport/tests/client/blocking_io/http/mod.rs | 261 | /// Location: http://attacker.example/repo/info/refs?service=git-upload-pack | COMMENT |
| LOW | gix-transport/src/lib.rs | 1 | //! An implementation of the `git` transport layer, abstracting over all of its [versions][Protocol]. | COMMENT |
| LOW | gix-transport/src/lib.rs | 21 | COMMENT | |
| LOW | gix-transport/src/client/non_io_types.rs | 1 | /// Configure how a `RequestWriter` behaves when writing bytes. | COMMENT |
| LOW | gix-transport/src/client/non_io_types.rs | 41 | #[cfg(feature = "blocking-client")] | COMMENT |
| LOW | gix-transport/src/client/traits.rs | 21 | Err(Error::AuthenticationUnsupported) | COMMENT |
| LOW | gix-transport/src/client/capabilities.rs | 21 | #[error("An IO error occurred while reading V2 lines")] | COMMENT |
| LOW | gix-transport/src/client/capabilities.rs | 181 | /// The information provided by the server upon first connection. | COMMENT |
| LOW | gix-transport/src/client/async_io/request.rs | 101 | /// Doing so will also write the message type this instance was initialized with. | COMMENT |
| LOW | gix-transport/src/client/async_io/bufread_ext.rs | 21 | /// but leave support for reading lines directly without forcing them through `String`. | COMMENT |
| LOW | gix-transport/src/client/async_io/bufread_ext.rs | 41 | /// Making this a trait method allows to handle differences between async and blocking. | COMMENT |
| LOW | gix-transport/src/client/async_io/traits.rs | 21 | /// In protocol version one, this is set to a list of refs and their peeled counterparts. | COMMENT |
| LOW | gix-transport/src/client/blocking_io/request.rs | 101 | /// Dissolve this instance into its write and read handles without any message-writing side-effect as in [`RequestWr | COMMENT |
| LOW | gix-transport/src/client/blocking_io/connect.rs | 1 | pub use crate::client::non_io_types::connect::{Error, Options}; | COMMENT |
| LOW | gix-transport/src/client/blocking_io/bufread_ext.rs | 21 | /// Read a packet line into the internal buffer and return it. | COMMENT |
| LOW | gix-transport/src/client/blocking_io/traits.rs | 21 | } | COMMENT |
| LOW | gix-transport/src/client/blocking_io/http/mod.rs | 121 | // TODO: testing most of these fields requires a lot of effort, unless special flags to introspect ongoing requests are | COMMENT |
| LOW | gix-transport/src/client/blocking_io/http/mod.rs | 141 | /// Refers to `http.lowSpeedTime`. | COMMENT |
| LOW | gix-transport/src/client/blocking_io/http/mod.rs | 161 | /// more correctly. | COMMENT |
| LOW | gix-diff/src/lib.rs | 1 | //! Algorithms for diffing various git object types and for generating patches, highly optimized for performance. | COMMENT |
| LOW | gix-diff/src/lib.rs | 21 | pub struct Rewrites { | COMMENT |
| LOW | gix-diff/src/rewrites/mod.rs | 21 | /// Determine in which set of files to search for copies. | COMMENT |
| LOW | gix-diff/src/rewrites/tracker.rs | 41 | /// Return the relation that this change may have with other changes. | COMMENT |
| LOW | gix-diff/src/rewrites/tracker.rs | 201 | /// the destination of a copy or rename, or with `None` for source if no relation to other | COMMENT |
| LOW | gix-diff/src/tree/visit.rs | 1 | use gix_hash::ObjectId; | COMMENT |
| LOW | gix-diff/src/tree/mod.rs | 21 | /// A trait to allow responding to a traversal designed to figure out the [changes](visit::Change) | COMMENT |
| LOW | gix-diff/src/tree/function.rs | 1 | use std::{borrow::BorrowMut, collections::VecDeque}; | COMMENT |
| LOW | gix-diff/src/tree_with_rewrites/change.rs | 21 | relation: Option<tree::visit::Relation>, | COMMENT |
| LOW | gix-diff/src/tree_with_rewrites/change.rs | 41 | /// a file into a symbolic link adjusts its mode. | COMMENT |
| LOW | gix-diff/src/tree_with_rewrites/change.rs | 61 | /// [`Addition`](ChangeRef::Addition) acting as destination. | COMMENT |
| LOW | gix-diff/src/tree_with_rewrites/change.rs | 81 | /// Note that this is the same as `id` if we require the [similarity to be 100%](super::Rewrites::percentage), b | COMMENT |
| LOW | gix-diff/src/tree_with_rewrites/change.rs | 121 | }, | COMMENT |
| LOW | gix-diff/src/tree_with_rewrites/change.rs | 141 | /// It may be empty if [file names](super::Options::location) is `None`. | COMMENT |
| LOW | gix-diff/src/tree_with_rewrites/change.rs | 161 | /// | COMMENT |
| LOW | gix-diff/src/tree_with_rewrites/change.rs | 181 | /// The mode of the entry after the rename. | COMMENT |
| LOW | gix-diff/src/tree_with_rewrites/function.rs | 1 | use bstr::BStr; | COMMENT |
| LOW | gix-diff/src/index/mod.rs | 81 | id: Cow<'rhs, gix_hash::oid>, | COMMENT |
| LOW | gix-diff/src/index/function.rs | 1 | use std::{borrow::Cow, cell::RefCell, cmp::Ordering}; | COMMENT |
| LOW | gix-diff/src/blob/mod.rs | 1 | //! For using text diffs, please have a look at the [`imara-diff` documentation](https://docs.rs/imara-diff), | COMMENT |
| LOW | gix-diff/src/blob/mod.rs | 21 | /// ``` | COMMENT |
| LOW | gix-diff/src/blob/mod.rs | 61 | } | COMMENT |
| LOW | gix-diff/src/blob/mod.rs | 81 | /// Please note that we don't make this call ourselves, but use it to determine that we should not run the our stand | COMMENT |
| LOW | gix-diff/src/blob/mod.rs | 101 | /// the content is considered binary. | COMMENT |
| LOW | gix-diff/src/blob/mod.rs | 121 | path: PathBuf, | COMMENT |
| 821 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | Cargo.toml | 45 | ## When used in conjunction with `http-client-curl-rustls`, the `openssl` crates will still be compiled, but won't be us | COMMENT |
| MEDIUM⚡ | gix-transport/Cargo.toml | 32 | ## If used in conjunction with other blocking implementations like `http-client-reqwest`, this one takes precedence. | COMMENT |
| MEDIUM⚡ | gix-transport/Cargo.toml | 35 | ## If used in conjunction with `http-client-curl-openssl`, this feature will take precedence. | COMMENT |
| MEDIUM⚡ | gix-transport/Cargo.toml | 38 | ## If used in conjunction with `http-client-curl-rust-tls`, the `rust-tls` feature will take precedence. | COMMENT |
| MEDIUM | gix-transport/Cargo.toml | 58 | ## Suitable for implementing your own transports while using git's way of communication, typically in conjunction with a | COMMENT |
| MEDIUM | gix-transport/Cargo.toml | 130 | ## If used in conjunction with `async-client`, the `connect()` method will become available along with supporting the gi | COMMENT |
| MEDIUM | gix-imara-diff/Cargo.toml | 36 | # harness = false | COMMENT |
| MEDIUM | gix/Cargo.toml | 267 | ## Make certain data structure threadsafe (or `Sync`) to facilitate multithreading. Further, many algorithms will now us | COMMENT |
| MEDIUM | gix/Cargo.toml | 286 | ## All [`gix::Error`](crate::Error) will produce error chains, which makes them work as expected in conjunction with `an | COMMENT |
| MEDIUM | gix/src/lib.rs | 53 | //! to understand which cache levels exist and how to leverage them. | COMMENT |
| MEDIUM | gix/src/revision/walk.rs | 151 | /// **Note that we automatically leverage the commitgraph data structure**, but if you know that additional information | COMMENT |
| MEDIUM | gix-hashtable/src/lib.rs | 54 | /// A Hasher for usage with `HashMap` keys that are already robust hashes (like an `ObjectId`). | COMMENT |
| MEDIUM | gix-hashtable/src/lib.rs | 94 | /// A Hasher for usage with `HashMap` keys that are already robust hashes (like an `ObjectId`). | COMMENT |
| MEDIUM | gix-hashtable/src/lib.rs | 107 | /// A `HashMap` for usage with keys that are already robust hashes (like an `ObjectId`). | COMMENT |
| MEDIUM | gix-hashtable/src/lib.rs | 110 | /// A `HashSet` for usage with keys that are already robust hashes (like an `ObjectId`). | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | gix-imara-diff/src/lib.rs | 113 | //! let after = r#"// lorem ipsum | COMMENT |
| LOW | gix-imara-diff/src/lib.rs | 134 | //! +// lorem ipsum | COMMENT |
| LOW | gix/tests/gix/repository/object.rs | 927 | config.set_value(&gix::config::tree::User::EMAIL, "user@example.com")?; | CODE |
| LOW⚡ | gix-mailmap/tests/snapshot/mod.rs | 22 | Some(signature("Jane Doe", "jane@example.com")), | CODE |
| LOW⚡ | gix-mailmap/tests/snapshot/mod.rs | 27 | Some(signature("Jane Doe", "jane@example.com")), | CODE |
| LOW⚡ | gix-mailmap/tests/snapshot/mod.rs | 33 | Some(signature("Jane Doe", "jane@example.com")), | CODE |
| LOW⚡ | gix-mailmap/tests/snapshot/mod.rs | 62 | Entry::change_name_and_email_by_name_and_email("Jane Doe", "jane@example.com", "Jane", "bugs@example.com"), | CODE |
| LOW⚡ | gix-mailmap/tests/snapshot/mod.rs | 69 | Entry::change_name_and_email_by_email("Jane Doe", "jane@example.com", "jane@desktop.(none)"), | CODE |
| LOW⚡ | gix-mailmap/tests/snapshot/mod.rs | 71 | Entry::change_name_and_email_by_email("Jane Doe", "jane@example.com", "jane@laptop.(none)"), | CODE |
| LOW⚡ | gix-mailmap/tests/parse/mod.rs | 33 | Entry::change_name_and_email_by_email("Jane Doe", "jane@example.com", "jane@laptop.(none)"), | CODE |
| LOW⚡ | gix-mailmap/tests/parse/mod.rs | 34 | Entry::change_name_and_email_by_email("Jane Doe", "jane@example.com", "jane@desktop.(none)"), | CODE |
| LOW⚡ | gix-mailmap/tests/parse/mod.rs | 35 | Entry::change_name_and_email_by_name_and_email("Jane Doe", "jane@example.com", "Jane", "bugs@example.com"), | CODE |
| LOW | gix-mailmap/src/lib.rs | 24 | //! assert_eq!(resolved.name, "Jane Doe"); | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .github/workflows/release.yml | 30 | # Create a draft release, initially with no binary assets attached. | COMMENT |
| MEDIUM | .github/workflows/ci.yml | 141 | # Define the wrapper script for a compiler driver (for cc1 or cc1plus). This wrapper | COMMENT |
| MEDIUM | .github/workflows/ci.yml | 157 | # Define the script that performs the wrapping. This script shall be run once for each | COMMENT |
| MEDIUM | .github/workflows/ci.yml | 170 | # Define a helper file that, when sourced, wires up the `~/display` symlink `wrapper1` | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | gix-merge/tests/merge/tree/mod.rs | 15 | /// 1. Add it to the `tree_baseline.sh` script and don't forget to call the | COMMENT |
| LOW | gix-merge/tests/merge/tree/mod.rs | 206 | "BUG: update this number, and don't forget to remove a filter in the end" | CODE |
| MEDIUM | gix/src/repository/worktree.rs | 12 | /// It's worth noting that a *bare* repository may have one or more linked worktrees, but has no *main* worktree, | COMMENT |
| MEDIUM | gix/src/revision/walk.rs | 207 | /// It interacts with [`use_commit_graph`][Platform::use_commit_graph()] as one would expect, but it's worth noting | COMMENT |
| MEDIUM | .github/workflows/codeql.yml | 65 | # If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | gix-protocol/src/fetch/response/mod.rs | 70 | /// The name of the ref, as requested by the client as a `want-ref` argument. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | gix-url/src/parse.rs | 260 | // TODO: implement UNC path special case | COMMENT |
| LOW | gix-object/src/commit/mod.rs | 33 | // TODO: implement `std::io::Read` to avoid allocations | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | etc/corpus/clone-repos.sh | 3 | # Check if there is input on stdin | COMMENT |